4781 matches found
phpSecurePages allows remote code execution
Overview There is an input validation vulnerability in phpSecurePages that may allow a remote intruder to execute arbitrary code with the privileges of the running web server. Description phpSecurePages is a tool for password protecting portions of websites on PHP enabled webservers. The...
Zope ZClass Modification Local DoS
The remote web server is Zope 2.2.5. Such versions allow any Zope user to create a denial of service by modifying Zope data structures, thus rendering the site unusable. Since Nessus solely relied on the version number of the server, consider this a false positive if the hotfix has already been...
SSH 3.0.0 Locked Account Remote Authentication Bypass
The remote host is running SSH 3.0.0. There is a bug in this release which allows any user to log into accounts whose password entry is two characters long or less. An attacker might gain root privileges using this flaw. C Tenable Network Security, Inc. include"compat.inc"; ifdescription...
Lotus Domino vulnerable to DoS via crafted HTTP header requests
Overview The Lotus Domino Web Server contains a flaw that could be exploited to cause a denial of service. Description HTTP requests with uniquely crafted headers using "Accept", "Accept-Charset", "Accept-Encoding", "Accept-Language" or "Content-Type" are not freed properly. This means that...
GoodTech FTP Server Connection Saturation DoS
The remote host appears to be running GoodTech FTP Server for Windows. It was possible to disable the remote FTP server by connecting to it about 3000 separate times. If the remote server is running from within xinetd, this is a feature and the FTP server should automatically be back in a couple ...
Linux gpm daemon allows arbitrary file removal
Overview gpm version 1.19.2 and earlier are vulnerable due to a flaw that allows a local user to delete arbitrary files. Description gpm General Purpose Mouse is the program that lets you use the mouse in console mode when not using XWindows. It is usually included in Linux distributions, and can...
Vulnerabilities in RaidenFTPD Server
----- Begin Hush Signed Message from [email protected] ----- Vulnerabilities in RaidenFTPD Server Overview RaidenFTPD v2.1 is an ftp server available from http://playstation2.idv.tw/raidenftpd. Vulnerabilities exist which allow users to break out of the ftp root. Details The following is an...
PHP-Nuke opendir.php Traversal Arbitrary File Read
The remote host has the CGI 'opendir.php' installed. This CGI allows anyone to read arbitrary files with the privileges of the HTTP server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid10655; scriptversion"1.26"...
Resin Traversal Arbitrary File Access
It is possible to read arbitrary files on the remote server by prepending /../../ to the file name. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10656; scriptversion"1.26"; scriptcvsdate"Date: 2018/07/27 18:38:15"; scriptcveid"CVE-2001-0304"; scriptbugtraqid2384;...
Savant Web Server Multiple Percent Request Remote DoS
It is possible to cause the Savant web server on the remote host to lock by sending a specially crafted GET request for a URL composed of percent characters. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10633; scriptversion "1.22"; scriptbugtraqid2468;...
Security Update: security problems in webmin CSSA-2001-004.0
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Caldera Systems, Inc. Security Advisory Subject: security problems in webmin Advisory number: CSSA-2001-004.0 Issue date: 2001 January, 17 Cross reference: 1. Problem Description On several occasions, webmin creates temporary files insecurely. This ca...
Samba Web Administration Tool (SWAT) Error Message Username Enumeration
The remote SWAT server replies with different error codes when it is issued a bad user name or a bad password. An attacker may use this flaw to obtain the list of user names of the remote host by a brute-force attack. As SWAT does not log login attempts, an attacker may use this flaw even more...
Sendmail mime7to8() Function Remote Overflow
The remote Sendmail server, according to its version number, may be vulnerable to a MIME buffer overflow attack which allows anyone to execute arbitrary commands as root. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10588; scriptversion"1.18";...
oops WWW Proxy Server Reverse DNS Response Overflow
The remote server appears to be running ooops WWW proxy server version 1.4.6 or older. Such versions are reportedly affected by a buffer overflow vulnerability. A remote attacker might exploit this vulnerability to crash the server or execute arbitrary commands on the remote system. C Tenable...
MailMan Webmail mmstdod.cgi Arbitrary Command Execution
The version of MailMan Webmail on the remote web server has an arbitrary command execution vulnerability. Input to the 'ALTERNATETEMPLATES' parameter of mmstdod.cgi is not properly sanitized. A remote attacker could exploit this to execute arbitrary commands on the system. %NASLMINLEVEL 70300 C...
OpenSSH Security Advisory (adv.fwd)
Hostile servers can force OpenSSH clients to do agent or X11 forwarding 1. Systems affected: All versions of OpenSSH prior to 2.3.0 are affected. 2. Description: If agent or X11 forwarding is disabled in the ssh client configuration, the client does not request these features during session setup...
ISC BIND < 8.2.2-P7 Compressed ZXFR Name Service Query DoS
The remote BIND server, according to its version number, is vulnerable to the 'ZXFR bug' that could allow an attacker to crash this service remotely. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10549; scriptversion"1.22"; scriptcvsdate"Date: 2018/06/27 18:42:25";...
[SECURITY] New version of curl fixes buffer overflow (update)
-----BEGIN PGP SIGNED MESSAGE----- - ------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman October 14, 2000 - ------------------------------------------------------------------------...
Cisco PIX Firewall Mailguard Feature SMTP Content Filter Bypass
The remote SMTP server seems to be protected by a content filtering firewall probably Cisco's PIX. However, an attacker may bypass this content filtering by issuing a DATA command before a MAIL command, that allows him to directly communicate with the real SMTP daemon. C Tenable Network Security,...
EFTP Newline String Handling Remote DoS
The version of EFTP running on the remote host has a denial of service vulnerability. Sending data without a trailing carriage return causes the service to crash. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10510; scriptversion"1.36";...